https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:55:05.508651+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99282 EUVD-2026-99282 2026-10-02T20:55:05.522712+00:00 EUVD-2026-99282 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3530 fkie_cve-2014-3530 2026-10-02T20:55:05.522748+00:00

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.

 https://cve.radiocsirt.org/vuln/ghsa-2c9q-qwrc-f486 GHSA-2c9q-qwrc-f486 — XML External Entity Reference in org.picketlink:picketlink-common 2026-10-02T20:55:05.522779+00:00

Affected: Maven: org.picketlink:picketlink-common

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.

 https://cve.radiocsirt.org/vuln/gsd-2014-3530 gsd-2014-3530 2026-10-02T20:55:05.522804+00:00 gsd-2014-3530 https://cve.radiocsirt.org/vuln/rhsa-2014:0883 RHSA-2014:0883 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 security update 2026-10-02T20:55:05.522816+00:00

PicketLink: XXE via insecure DocumentBuilderFactory usage